CVE-2026-94448

Medium

Advisory

Published 8 Oct 2026In the index since 9 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,306; of 18,108 indexed, latest versions
Container images: 6,104; deployed by those charts
Fix available: 1 of 2; affected packages

Reset context tracking on consecutive template expressions in html/template

Carried by container images the latest versions of 5,306 of 18,108 indexed charts deploy, on 6,104 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.9	6,104
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-94448 GO-2026-6599
Trending: Rank 12 in indexed charts, since 9 Oct 2026. See the ranking →

Charts affected

5,306 by stars

Chart

Latest

Affected images

Radar Score

oesopsmx

4.0.32

8 of 25 See more

oes opsmx 4.0.32

8 of the 25 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/awsgit :v2-openssh	0d21ba756f44	stdlib@go1.17.2	1.26.9
quay.io/opsmxpublic/awsgit :v3-js	15a6faada3d4	stdlib@go1.16.15	1.26.9
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	stdlib@go1.20.3	1.26.9
quay.io/opsmxpublic/forwarder-controller :v3.5.7	f0c5bebaec96	stdlib@go1.19.1	1.26.9
quay.io/opsmxpublic/opa :opa-sidecar-v1.0	3dcbf3caa454	stdlib@go1.24.11	1.26.9
quay.io/opsmxpublic/opa :1.12.0	84fb1af7401c	stdlib@go1.25.5	1.26.9
quay.io/opsmxpublic/rabbitmq :4.2-management	3408107e5cc4	stdlib@go1.22.2	1.26.9
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	stdlib@go1.13.1	1.26.9

Open the chart page →

111,549

pacto-operatorpacto-operator

5.4.2

1 of 1 See more

pacto-operator pacto-operator 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
ghcr.io/trianalab/pacto/operator :5.4.2	fc2c05866911	stdlib@go1.26.6	1.26.9

Open the chart page →

229

ipfs-clusterparadeum-team

0.0.19

2 of 2 See more

ipfs-cluster paradeum-team 0.0.19

2 of the 2 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
ipfs/go-ipfs :v0.13.1	17259397f587	stdlib@go1.18.3	1.26.9
ipfs/ipfs-cluster :1.0.2	1511f6d57994	stdlib@go1.18.3	1.26.9

Open the chart page →

5,740

permifypermify

0.5.0

1 of 1 See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	stdlib@go1.22.4	1.26.9

Open the chart page →

1,585

persesperses

0.23.3

1 of 1 See more

perses perses 0.23.3

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
persesdev/perses :v0.54.0	a0e34ddaf9d7	stdlib@go1.26.5	1.26.9

Open the chart page →

453

platzioplatz-io

0.6.5

1 of 2 See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
platzio/backend :v0.6.5	d5e5972f344b	stdlib@go1.24.3	1.26.9

Open the chart page →

3,647

plecopleco

0.24.0

1 of 1 See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	stdlib@go1.21.6	1.26.9

Open the chart page →

2,052

ipmi-exporterpnnl-miscscripts

0.1.15

1 of 1 See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/ipmi-exporter :1.2.0-1	81e18992d8e3	stdlib@go1.13.10	1.26.9

Open the chart page →

4,372

pomeriumpomerium

34.0.1

1 of 1 See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
pomerium/pomerium :v0.22.1	9c69b10a2126	stdlib@go1.20.3	1.26.9

Open the chart page →

2,906

prometheus-memcached-exporterprometheus-community

0.6.0

1 of 1 See more

prometheus-memcached-exporter prometheus-community 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
prom/memcached-exporter :v0.17.0	995c80e3ffbe	stdlib@go1.26.6	1.26.9

Open the chart page →

243

prometheus-pgbouncer-exporterprometheus-community

0.10.1

1 of 1 See more

prometheus-pgbouncer-exporter prometheus-community 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/pgbouncer-exporter :v0.12.1	30f31b6c2efd	stdlib@go1.26.4	1.26.9

Open the chart page →

577

prometheus-systemd-exporterprometheus-community

0.5.2

1 of 1 See more

prometheus-systemd-exporter prometheus-community 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/systemd-exporter :v0.7.0	78c03f875dfb	stdlib@go1.24.1	1.26.9

Open the chart page →

1,256

prometheus-yet-another-cloudwatch-exporterprometheus-community

0.48.0

1 of 1 See more

prometheus-yet-another-cloudwatch-exporter prometheus-community 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/yet-another-cloudwatch-exporter :v0.68.0	651b4041d9c3	stdlib@go1.26.8	1.26.9

Open the chart page →

141

kube-prometheus-stackprometheus-worawutchan

12.8.0

4 of 6 See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

4 of the 6 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
grafana/grafana :7.2.1	733842cca5bd	stdlib@go1.15.1	1.26.9
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	stdlib@go1.15.3	1.26.9
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	stdlib@go1.14.12	1.26.9
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	stdlib@go1.14.4	1.26.9

Open the chart page →

17,218

qgis-serverqgis-server

0.1.10

1 of 3 See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	stdlib@go1.24.0	1.26.9

Open the chart page →

6,431

nfs-server-provisionerraphael

1.3.0

1 of 1 See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	stdlib@go1.15	1.26.9

Open the chart page →

3,971

repoflowrepoflow-helm-public

0.9.1

1 of 8 See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
library/postgres :16.2	4aea012537ed	stdlib@go1.18.2	1.26.9

Open the chart page →

14,533

wordpress-hardenedriotkit-org

2.0.0

2 of 2 See more

wordpress-hardened riotkit-org 2.0.0

2 of the 2 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
ghcr.io/riotkit-org/waf-proxy :snapshot	683656fdace2	stdlib@go1.18.3	1.26.9
ghcr.io/riotkit-org/wordpress-hardened :v2.0	edc6b69873be	stdlib@go1.17.9	1.26.9

Open the chart page →

8,493

backrestrobertobochet

0.7.0

1 of 1 See more

backrest robertobochet 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
garethgeorge/backrest :v1.14.1	b85297975428	stdlib@go1.26.0	1.26.9

Open the chart page →

1,328

supabaserock8s

0.0.6

1 of 1 See more

supabase rock8s 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
library/postgres :15-alpine	f7d23353e1b1	stdlib@go1.24.6	1.26.9

Open the chart page →

696

rqliterqlite

2.0.0

1 of 1 See more

rqlite rqlite 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
rqlite/rqlite :9.1.3	7b992a526eee	stdlib@go1.25.3	1.26.9

Open the chart page →

1,796

qbittorrent-vpnrtomik-helm-charts

0.0.2

1 of 2 See more

qbittorrent-vpn rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
qmcgaw/gluetun :v3.40.0	2b42bfa04675	stdlib@go1.23.4	1.26.9

Open the chart page →

1,767

sabliersablier-helm-charts

1.8.1

1 of 1 See more

sablier sablier-helm-charts 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
sablierapp/sablier :1.16.1	413704376656	stdlib@go1.26.3	1.26.9

Open the chart page →

465

satisfactory-serversatisfactory

0.1.6

1 of 1 See more

satisfactory-server satisfactory 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
wolveix/satisfactory-server :v1.9.10	e103700ae6ae	stdlib@go1.18.1	1.26.9

Open the chart page →

4,529

seaweedfs-csi-driverseaweedfs-csi-driver

0.2.40

7 of 7 See more

seaweedfs-csi-driver seaweedfs-csi-driver 0.2.40

7 of the 7 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
chrislusf/seaweedfs-csi-driver :v1.4.34	1fca534c9001	stdlib@go1.26.8	1.26.9
chrislusf/seaweedfs-mount :v1.4.34	7c6250e96001	stdlib@go1.26.8	1.26.9
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	stdlib@go1.20.3	1.26.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	stdlib@go1.20.3	1.26.9
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	stdlib@go1.20.3	1.26.9
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	stdlib@go1.20.3	1.26.9
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	stdlib@go1.20.3	1.26.9

Open the chart page →

9,038

seldon-core-operatorseldon

1.19.0

1 of 1 See more

seldon-core-operator seldon 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
seldonio/seldon-core-operator :1.19.0	544e3bf71bd1	stdlib@go1.24.11	1.26.9

Open the chart page →

1,373

bentoself-hosters-by-night

0.9.1

1 of 1 See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
ghcr.io/warpstreamlabs/bento :1.8.1	21715979aefa	stdlib@go1.23.10	1.26.9

Open the chart page →

1,776

lldapself-hosters-by-night

0.5.2

2 of 2 See more

lldap self-hosters-by-night 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
library/postgres :18.1	1090bc3a8ccf	stdlib@go1.24.6	1.26.9
ghcr.io/lldap/lldap :2025-05-19	3de697c3ba57	stdlib@go1.18.2	1.26.9

Open the chart page →

5,031

appshini4i

0.4.0

1 of 1 See more

app shini4i 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.10.2	1474027c3166	stdlib@go1.22.2	1.26.9

Open the chart page →

1,103

skypilotskypilot

0.14.0

3 of 3 See more

skypilot skypilot 0.14.0

3 of the 3 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
berkeleyskypilot/skypilot :0.14.0	a8362d205365	stdlib@go1.26.2	1.26.9
registry.k8s.io/ingress-nginx/controller :v1.11.8	695d79381ee6	stdlib@go1.24.4	1.26.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	stdlib@go1.24.4	1.26.9

Open the chart page →

6,163

corednssoftizy

0.2.0

1 of 1 See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
coredns/coredns :1.10.1	a0ead06651cf	stdlib@go1.20	1.26.9

Open the chart page →

2,544

knative-servingsoftonic

3.0.0

5 of 5 See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned	873b968f02b5	stdlib@go1.14.2	1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	a5de0fb75046	stdlib@go1.14.2	1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	2ef460356b17	stdlib@go1.14.2	1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	30ce73388ae5	stdlib@go1.14.2	1.26.9
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	f16c0e022203	stdlib@go1.14.2	1.26.9

Open the chart page →

18,859

forecastlestakater

2.1.3

1 of 1 See more

forecastle stakater 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
stakater/forecastle :v2.0.2	382cd9572352	stdlib@go1.26.4	1.26.9

Open the chart page →

1,105

ingressmonitorcontrollerstakater

2.2.13

1 of 1 See more

ingressmonitorcontroller stakater 2.2.13

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
ghcr.io/stakater/ingressmonitorcontroller :v2.2.13	3301afb61c10	stdlib@go1.24.13	1.26.9

Open the chart page →

992

tigera-operatorstevehipwell

2.15.0

1 of 1 See more

tigera-operator stevehipwell 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.44.0	066c2e8d6745	stdlib@go1.27.1-X:boringcrypto	1.26.9

Open the chart page →

205

vertical-pod-autoscalerstevehipwell-helm-charts-vertical-pod-autoscaler

1.12.1

3 of 3 See more

vertical-pod-autoscaler stevehipwell-helm-charts-vertical-pod-autoscaler 1.12.1

3 of the 3 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/vpa-admission-controller :1.7.1	be29624f7f12	stdlib@go1.26.5	1.26.9
registry.k8s.io/autoscaling/vpa-recommender :1.7.1	89cea705535f	stdlib@go1.26.5	1.26.9
registry.k8s.io/autoscaling/vpa-updater :1.7.1	feb42a526970	stdlib@go1.26.5	1.26.9

Open the chart page →

1,026

sn-platformstreamnative

1.11.46

6 of 9 See more

sn-platform streamnative 1.11.46

6 of the 9 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.26.9
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	stdlib@go1.20.4	1.26.9
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	stdlib@go1.17.11	1.26.9
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	stdlib@go1.19.4	1.26.9
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	stdlib@go1.19.3	1.26.9
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	stdlib@go1.19.7	1.26.9

Open the chart page →

78,269

stunnerstunner

1.2.1

2 of 2 See more

stunner stunner 1.2.1

2 of the 2 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
l7mp/stunner-auth-server :1.2.1	0d2094060b72	stdlib@go1.26.4	1.26.9
l7mp/stunner-gateway-operator :1.2.1	0ea40a1d42d5	stdlib@go1.26.4	1.26.9

Open the chart page →

844

pocketbasetechwolf12

0.29.3

1 of 1 See more

pocketbase techwolf12 0.29.3

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
ghcr.io/techwolf12/pocketbase :0.29.3	106099641679	stdlib@go1.24.6	1.26.9

Open the chart page →

2,021

pretixtechwolf12

2026.7.0

1 of 3 See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
library/postgres :18.4	a02db8cac496	stdlib@go1.24.6	1.26.9

Open the chart page →

12,490

mealieth-charts

0.5.1

1 of 1 See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v3.7.0	bb2939094eed	stdlib@go1.24.4	1.26.9

Open the chart page →

4,760

thingsboard-clusterthingsboard-cluster-betta

0.2.26

3 of 6 See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

3 of the 6 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka :3.5.0-debian-11-r0	8657bb93a581	stdlib@go1.20.5	1.26.9
bitnamilegacy/redis :7.2.1-debian-11-r0	fa288394f402	stdlib@go1.19.12	1.26.9
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	stdlib@go1.19.12	1.26.9

Open the chart page →

18,050

feedbacksystemthm-mni-ii

0.48.3

11 of 14 See more

feedbacksystem thm-mni-ii 0.48.3

11 of the 14 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	stdlib@go1.21.5	1.26.9
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.26.9
bitnamilegacy/mysql :8.0.35-debian-11-r2	be03e8ea6129	stdlib@go1.21.5	1.26.9
library/docker :20.10.21-dind	3153fa63f546	stdlib@go1.18.7	1.26.9
ghcr.io/thm-mni-ii/fbs-core :v2.0.9	18e54463756e	stdlib@go1.26.7	1.26.9
ghcr.io/thm-mni-ii/fbs-core-web :v2.0.9	daeca3604040	stdlib@go1.26.8	1.26.9
ghcr.io/thm-mni-ii/fbs-identity-service :v2.0.9	45929f5c1a12	stdlib@go1.26.7	1.26.9
ghcr.io/thm-mni-ii/fbs-qcm-frontend :v2.0.9	083d81d517e7	stdlib@go1.20.12	1.26.9
ghcr.io/thm-mni-ii/fbs-runner :v2.0.9	ffaf49a4d687	stdlib@go1.20.11	1.26.9
ghcr.io/thm-mni-ii/fbs-sql-playground-web :v2.0.9	806d28c6fac0	stdlib@go1.26.8	1.26.9
ghcr.io/thm-mni-ii/fbs-web-shell :v2.0.9	939ec6417e01	stdlib@go1.26.8	1.26.9

Open the chart page →

29,709

topaztopaz

0.2.5

1 of 1 See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
ghcr.io/aserto-dev/topaz :0.32.59	4c708ecf7dc4	stdlib@go1.24.2	1.26.9

Open the chart page →

2,296

maeshtraefik

2.1.2

1 of 7 See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
containous/maesh :v1.3.2	587162516502	stdlib@go1.14.4	1.26.9

Open the chart page →

6,028

traefik-meshtraefik

4.1.1

3 of 7 See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.18	db45c07f2e1b	stdlib@go1.14.4	1.26.9
library/traefik :v2.5	7d5a6ae66572	stdlib@go1.17.6	1.26.9
traefik/mesh :v1.4.8	cf071f3e165c	stdlib@go1.19	1.26.9

Open the chart page →

13,206

ttl-controllerttl-controller

1.9.1

1 of 1 See more

ttl-controller ttl-controller 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/ttl-controller/ttl-controller :1.9.1	8092dd72f073	stdlib@go1.27.0-X:nodwarf5	1.26.9

Open the chart page →

201

k8s-ttl-controllertwin

0.4.0

1 of 1 See more

k8s-ttl-controller twin 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
ghcr.io/twin/k8s-ttl-controller :v1.4.0	0525a7def93d	stdlib@go1.24.1	1.26.9

Open the chart page →

990

argocdtwomartens

0.1.1

2 of 3 See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	stdlib@go1.19.6	1.26.9
quay.io/argoproj/argocd :v2.8.6	acaf37352569	stdlib@go1.20.4	1.26.9

Open the chart page →

12,595

crossplaneupbound-stable

2.4.2-up.1

1 of 5 See more

crossplane upbound-stable 2.4.2-up.1

1 of the 5 container images this version deploys carry CVE-2026-94448.

Container image	Digest	Package	Fixed in
library/postgres :14	14bfab572eec	stdlib@go1.24.6	1.26.9

Open the chart page →

1,801

Container images carrying it

6,104 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/loafoe/picoclaw :v0.0.19	42e1b6862913	stdlib@go1.26.2	1.26.9	1
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	stdlib@go1.21.0	1.26.9	1
ghcr.io/lockdep/stackradar-scanner :0.6.0	a90480c17377	stdlib@go1.25.7	1.26.9	1
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	stdlib@go1.18.10	1.26.9	1
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	stdlib@go1.23.2	1.26.9	1
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	stdlib@go1.20.10	1.26.9	1
ghcr.io/loft-sh/kubernetes :v1.35.0	90097a08b87c	stdlib@go1.24.11	1.26.9	1
ghcr.io/loft-sh/license-server :0.6.0	69ce001bb4b0	stdlib@go1.24.3	1.26.9	1
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	stdlib@go1.20.7	1.26.9	1
ghcr.io/loft-sh/vcluster :0.16.4	84f70425f4dd	stdlib@go1.20.8	1.26.9	1
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	stdlib@go1.22.0	1.26.9	1
ghcr.io/loft-sh/vcluster-hpm :0.2.7	f65f6810ea23	stdlib@go1.24.2	1.26.9	1
ghcr.io/loft-sh/vcluster-platform :4.12.2	71d869f989e9	stdlib@go1.26.5	1.26.9	1
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	stdlib@go1.24.2	1.26.9	1
ghcr.io/loxilb-io/kube-loxilb :latest	6f65e53e252d	stdlib@go1.23.12	1.26.9	1
ghcr.io/loxilb-io/loxilb :latest	a475b43946b3	stdlib@go1.22.5	1.26.9	1
ghcr.io/lrstanley/vault-unseal :1.0.1	dd873930b6df	stdlib@go1.26.5	1.26.9	1
ghcr.io/luckypipewrench/pipelock :3.6.0	66d65eaca81d	stdlib@go1.26.8	1.26.9	1
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	stdlib@go1.16.15	1.26.9	1
ghcr.io/lumovi/lumovi :1.21.0	947088240bb5	stdlib@go1.27.1	1.26.9	1
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	stdlib@go1.23.4	1.26.9	1
ghcr.io/luzifer/ots :v1.22.0	1a62eb026ff5	stdlib@go1.27.1	1.26.9	1
ghcr.io/luzilla/dnsbl_exporter :v0.7.0-rc3	d9767232a55e	stdlib@go1.20.14	1.26.9	1
ghcr.io/luzilla/dnsbl_exporter :v0.12.0	ecba7360ff12	stdlib@go1.25.0	1.26.9	1
ghcr.io/m0nsterrr/as212510.net :v4.0.5	76a06f6a8371	stdlib@go1.27.1	1.26.9	1
ghcr.io/m0nsterrr/cert-manager-webhook-infomaniak :v0.1.6	5b7373bc3664	stdlib@go1.27.1	1.26.9	1
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	stdlib@go1.21.5	1.26.9	1
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	stdlib@go1.20.12	1.26.9	1
ghcr.io/madduck-tech/loomwatch :1.15.9	8f08e7c84910	stdlib@go1.25.14	1.26.9	1
ghcr.io/madeddie/opds-aggregator :latest	60c56021c552	stdlib@go1.24.13	1.26.9	1
ghcr.io/mailcow/prometheus-exporter :2.1.0	cb76395b84eb	stdlib@go1.23.12	1.26.9	1
ghcr.io/maltzsama/deepdiver :0.12.4	9f7914878811	stdlib@go1.27.0	1.26.9	1
ghcr.io/maltzsama/lakedeepdiver :0.3.5	a6e0b03141ff	stdlib@go1.26.5	1.26.9	1
ghcr.io/manishchaudhary101/kube-argus :latest	8e3869d31c70	stdlib@go1.26.5	1.26.9	1
ghcr.io/manzil-infinity180/deploydefender :ea3ab0bb646cdbeddd1aca483ecf650f9ac0d084	7fbc6855c8b3	stdlib@go1.22.7	1.26.9	1
ghcr.io/manzil-infinity180/frontend-dumpstore :226f28ca3efa6d3691044813cd09085e28d4a7b4	4e6394b715d9	stdlib@go1.20.12	1.26.9	1
ghcr.io/mariadb-operator/mariadb-operator :26.10.1	37714fb240a5	stdlib@go1.27.1	1.26.9	1
ghcr.io/maritimeconnectivity/identityregistry :latest	91de8dfffafe	stdlib@go1.26.7	1.26.9	1
ghcr.io/marmotdata/marmot :0.11.0	cbc560cba46e	stdlib@go1.26.8	1.26.9	1
ghcr.io/martabal/qbittorrent-exporter :v2.0.1	ddf2bff9b357	stdlib@go1.26.3	1.26.9	1
ghcr.io/marthydavid/kafka-keda-golang-consumer :0.0.4	e07644865dd1	stdlib@go1.23.0	1.26.9	1
ghcr.io/marthydavid/kafka-keda-golang-producer :0.0.4	54b242c7bf2b	stdlib@go1.23.0	1.26.9	1
ghcr.io/masucchi/branchdb :0.1.4	7ea1820c1da1	stdlib@go1.26.4	1.26.9	1
ghcr.io/masucchi/branchdb-operator :0.1.4	c16578615a43	stdlib@go1.26.4	1.26.9	1
ghcr.io/matanbaruch/cursor-admin-api-exporter :0.1.8	ba3a29fc479a	stdlib@go1.24.5	1.26.9	1
ghcr.io/matanbaruch/netbird-api-exporter :0.2.17	6d259e3a81a3	stdlib@go1.27.1	1.26.9	1
ghcr.io/mateopedersen/betacalendars-calendar-boundary-lab :1.0.0	43da2a255584	stdlib@go1.25.14	1.26.9	1
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	stdlib@go1.18.5	1.26.9	1
ghcr.io/mattn/picoclaw :latest	517556c8b144	stdlib@go1.26.0	1.26.9	1
ghcr.io/maximewewer/wazuh-operator :2026.10.1	bb46b9aab52b	stdlib@go1.27.1	1.26.9	1